targetScope = 'subscription'

metadata name = 'With immutability policy'
metadata description = 'This instance deploys the module with the immutability policy enabled.'

// ========== //
// Parameters //
// ========== //

@description('Optional. The name of the resource group to deploy for testing purposes.')
@maxLength(90)
param resourceGroupName string = 'dep-${namePrefix}-storage.storageaccounts-${serviceShort}-rg'

@description('Optional. The location to deploy resources to.')
param resourceLocation string = deployment().location

@description('Optional. A short identifier for the kind of deployment. Should be kept short to not run into resource-name length-constraints.')
param serviceShort string = 'ssaim'

@description('Optional. A token to inject into the name of each resource.')
param namePrefix string = '#_namePrefix_#'

// ============ //
// Dependencies //
// ============ //

// General resources
// =================
resource resourceGroup 'Microsoft.Resources/resourceGroups@2025-04-01' = {
  name: resourceGroupName
  location: resourceLocation
}

// ============== //
// Test Execution //
// ============== //

@batchSize(1)
module testDeployment '../../../main.bicep' = [
  for iteration in ['init', 'idem']: {
    scope: resourceGroup
    name: '${uniqueString(deployment().name, resourceLocation)}-test-${serviceShort}-${iteration}'
    params: {
      name: '${namePrefix}${serviceShort}001'
      allowBlobPublicAccess: false
      networkAcls: {
        defaultAction: 'Deny'
        bypass: 'AzureServices'
      }
      blobServices: {
        isVersioningEnabled: true
        containers: [
          {
            name: 'archivecontainer'
            publicAccess: 'None'
            metadata: {
              testKey: 'testValue'
            }
            immutabilityPolicy: {
              allowProtectedAppendWrites: false
            }
            immutableStorageWithVersioningEnabled: true
          }
        ]
      }
      immutableStorageWithVersioning: {
        enabled: true
        immutabilityPolicy: {
          allowProtectedAppendWrites: true
          immutabilityPeriodSinceCreationInDays: 7
          state: 'Unlocked'
        }
      }
    }
  }
]
